CVE-2014-7158: CSRF

Published Oct 2, 2014

Updated

Cross-site request forgery (CSRF) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch.

Affected Software

1 affected component

Exinda WAN Optimization Suite=7.0.0

Event History

Oct 2, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-7158?

CVE-2014-7158 is classified as a medium severity cross-site request forgery (CSRF) vulnerability.

How do I fix CVE-2014-7158?

To fix CVE-2014-7158, you should upgrade to the latest version of Exinda WAN Optimization Suite that addresses this vulnerability.

Who is affected by CVE-2014-7158?

CVE-2014-7158 affects users of Exinda WAN Optimization Suite version 7.0.0.

What type of vulnerability is CVE-2014-7158?

CVE-2014-7158 is a cross-site request forgery (CSRF) vulnerability that allows unauthorized changes to administrator settings.

What can attackers do with CVE-2014-7158?

Attackers exploiting CVE-2014-7158 can hijack administrator authentication to change the admin password.